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[ ¥t tf m # <o is m ] 
1 ] 

3 >V7 h v xTmmzttiitt ztctboy, *h<-t 4 > xt mt /umu-f* 

-r-fy^s/XTAtOIHK:ffijiB«lft{t/fi«l/'f + *filA^5«fc^U:b, C *i «fc »K 
[1*12] 

o 

[ 11 * * 3 ] 

fc-rsiURj|i2iB*©5'*f-A;, 

[ffl*g 4 ] 

IS * ft 1 !B i f •> 7 f A o . • 

[ » * « 5 ] 

Hlz-fO^yXfiffWindows ( S ffi A ) ^-X<0^1/-f.fy^->X 
fiT8*i5lCl/, Windows (SSiSI) Registry^. i n i 7 7 ^ 
/HCJttSSffUt^TWi n32 AP I Iz J: o T fr fc> ft 3 © T» * t) , IS S # if ffl 

[ ii * a 6 ] 

^-/^-^p>si7?nT^57y | jt-->3 y»cj:5s*T*sn, 7^x^71;: ws^ft 
r itfRtts a p iiafnfti*77n5tfflf$K tttftmttzmxm 5 12 

I O •> X f A . 
C flf * 9 7 ] 

^*fIt8t.OT**Ci*l9Ii:t4»*flll EiOf XfA, 
[H*ft8] 

I? ff * ft T t> § 7 7" *r - -> 3 y 4 y x * y x 1 o©*T«ft^Ji^, hu G * ^ u - r 

[ II * ft 9 3 

ss^nsiofgfc fc*«fat-rss*ft 1 ie is <o 2/ x t a . 

CiS*« 1 0 ] 

t 5 J 7 y h 3 y V JL- 2 ±<Dffi®\C ZvT 7 7V a y<D®tt&T®2 ftfc 

ztizc t*!R±?ztzto<D¥m&2 bKtirzc tzft&t-t&n&maiawifDi'XT- 
c 11* m 1 1 ] 

II*«9fB«O^XrA 0 



(3) 



JP 2004-533054 A 2004. 10. 28 



[ m m m i 2 ] 

* - V 7 1-7x777 D^-y 3 > © £ & © J > X * y X # Pfl U 9 9 f 7 > b 3 > kf a - 
*±T»£ffStlSfc0T?fcD* flUE*»©-OX*:'X©*4ftt 1 0©g&i>T-?^- 
Xfc»«Sft3fe©T*fc*2:fc*tt*fc**fll#:fl9lE*©S'X? , Ao 
CW*S 13] 

«p«i:-rs|g*«l 2 12 « © X r A . 
1 4 3 

HS07yj^-->3 yto^TYyx h - Jl m (c 4r <f* £ £ © 5 * X F7-(Mt- io 
2-£££tcftiTSo££#©hT3It#ffili2Sc«yXxA„ 

[ m * a i 53 

£ « flg U X h U £ 7 7 U * - y a y Jf « f 5 tf, S * X r A U ->* X b U K *t * 5 g 
MttBJt"r5ffi3B!WI ndows ( 3 g ffi «R ) Reg i s t r y n>-#-*y^?f, 
KSr4Ck4»litS|«J!ll 13«©yxf A 0 
C » * « l 6 3 

4-fc.feQ**-OfflA^^^-7 1 -<y^v'XxA}ft^{b/'KSU'ri'li:1S^^txT^5^ 
^^U-r^^^^XrAtt^ft/«ab'<i'* ? miIB^-*5 c i;D : + -©filT'^gL 

ndows (liSI) R e g i s t r y $ tia? ti- 5 l t 4l§t 5 t ©Tfe § C 20 

t^^gii:-r^w*« i mmvyxy- l 0 
imxm 173 

X T A. 

[»W©l¥*Ba8iW] 
[ & ffi » if 3 
[ 0 0 0 1 3 

#tHIIi«*HltI ! Fmiil?!0 9/ 4 5 6. 18 1^cO-g|5«^tt)iiTfeO, * © ± W W + # 
lcmmZtlT^Z$>(DtL. mmP^XMtLT C£l,C&%2tl5 0 30 
[ 0 0 0 2 ] 

*mWtt, 3>tfa-^V7h^x7, <t0l¥ffl(Cti^^b-rf>'^v'XTAy7h7 

[ W ft & ffi 3 
C 0 0 0 3 3 

£<©««£* l^t\ 1f fc 7 7 y * - y a y * v b 7 - *7*ftLT®Z.1\>lsnZ>Z.o%.m 
dlcfe^TltlBftmii, S8ft^>'7 h - /I/ ft K L tc 7 7 V >r - > a y * f <* 
M'iyT* % & C t T* £> %> o -iC, - W © ft * .3/ X r A T* , tottim? v # ? V 7* 

[8$ ©08*3 
[ 0 0 0 4 3 

c ©ck 5 *^SI£*t 9 ^©<k r> ft£ < ©&gffltf£ U 5. fftfr-S, 77'^->3 

fr-s> 3 y©-< y x £ y^tfia#ftt 5 c t , ® 0 ffi L mmttmUT* $> %> fctb , 77'J 

£ BU 6 tc -T 5 ft W h 5 C <h . «8B77^-'/a y T' ft ft 7 r -f t ft ft 5/ X -r A 

h^f ffl^nn^ftft, $ D L & fl t y y x h - /i/ & if # J8 *t tc # *> i: 50 
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f o It ffl II T- h i o 
[ 0 0 0 5 ] 

ii7?nt^i>7 7'in->'3 y<03yf + x hrtr*i«^icf7i/\ 10 

#-*>hK:»1-*«5!*jiffli3<fet;i«56-r*^-l£Xi:UT«()6-rSo 
[ 0 0 0 6 ] 

LftA^T^ fetAlfW i nd ows (liffli) ^-X<D4-^l/-f -f y^-yXfArt 
© * JS # AS T tt , Wi ndows ( S St ft A ) Reg i s t ryfcWfSilflFtt-f^T 
Wi n32 AP I tc <fc o T fc> *U #£L<&:VXTAtf|ig£5i£7>y^-f3fc46©M 

^onftfWU^rtfW-r*. g # £ L < ti , - /t - *> 6 H fir * tl T V 5 7 7 U * - 3 
^K«fc£g#Tifc*U 7^f^l:gl2nT^5«l*-li:}iLT77*^-V3y*« 20 

So 

[ 0 0 0 7 ] 

yj/xf-z»a*ft/«Ku-r ifTfnt^577"'jy--> 3 y'/yx^yxoa^ 

gltUtt', 10077"'J^-->3yiDS»OXJyXOJit&*llt5. C © £ 
3 * fig T* « , tlr?tiT^577 ,| n-i/3 V << > X 2 > X 1 O CD & T* a * ^ « 

* s Ell^fcf t 7 h^^ROSISIttSCfc^fit.jffSHs dOH as'* Ml T* tt , 
m M ii s - -f - cd tc #> \c % m<D 7 "f v >r - */ 3 y-fyx?yx5|}TT*fJ, v ;U 
a-.f-t^l/-TYy^*->Xf A5:-tt* - ht5C tt6jr t T*$l. 0 - 30 
[ 0 0 0 8 ] 

ccd Tcib, *<*1>-t 4 y 9 *y Xf AttiHt /UMUJ -fyxh-;^iiTUi^ 
fti'yx l--;H^T'$5 J: 5 tcin5M^7/ | jy-->3 y(ci«t§„ c n (c J; 
0> 7^ U fr-: 5/ a y © SSfif WMC * T O *<E SSRiS fc fc ft 6 rifil^yXh 

- ;v j tfffSJns, £ fc , 7 7"n--y3y* l i'yxi<-;^tiT^5l^ii 1 H fif 8 

a-*±©1f^fc£oT77°i;fr-:/3>iH?tfT#»§£gtff;:'5, ^MttlSCh?; 

t 5 HO? 5. ±f3©£5tc, -»©*«UB/IRT»«, IB) C ^ 7 y h n y 

if #-y7 h9i777'^--y3y(DllO'i , yx^ yx^ltTtsa*' 40 

T'f« tDctMcfffiE^nn^i^l^ft) o CO * 5**aS«»T?tt, #-7 

7 p, J^-^3y©ijiB©«?S©^>x^yx©3*.©'>%<i:fe2o^ioJ.X±©{gSi3 

[ 0 0 0 9 ] 

H 1 t4 , : * a w , t^i/-foy-yxf/>, fcicfy7i-0i777^--y3y«fi 

5stWI«^it7D7^IS0T'$i5 5 * 56 ffj © iff £ L l> m. fa B IS (t , t^lz-fOfJ/ 

xfillit/filU'ft (1 00) *ffiffit5o c n £ r^^i/-f ^yyyxf 

— k j t if s 0 w w »c t* » £ » © * ^ u - r * > fr x r a (1 o ) n'nmicy? 

V fr - v 3 >il)'S^KBil/# 5 C t * W ± t «|g F ^ W > £ ffit A 3 0 L, # *f £ 50 
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o«i^-r>tf)iKicj5jn5 0 * ^ u - f- -< y y xt- Lffimit/ {%mi"{ ^ ( 1 

0 0) tt , 7 7* U 7" - > 3 y U * tV m <D\lth,E<r> m S ft ffl * 4 < T It tf> K , 7 a $r 9 A 

»jffli*nyc»s«:7^uy-'>3> (50) m k ii jd s . 7/^-5/37 (50) t 

Hlz-fO^J'^fi (10) tOHCEiStlft77') t-->3 ytttft/SIl/ 
* + (1 00) tf, t^l/-TO^^fi> (10) KJsff SISWSiSS*', 

HTWi ndows (SSSi) ^-XOv'XfAT'ttli, Wi ndows ( S ® i85 
9 ) Reg i s t r y iC^f^Sfttt t^TW i n32 AP I IC J: o Tiff SftS. 
& $ "f S J: ? (C , QueryRegEx-^GetProfi I e S t r i ngit'«)->X 

r a w st # "¥ m ? ft 3 t>* k gy <d m » s ft \t 7 -7 y >r - y a y w c <n n xs m l * 4> »t r 

7° 'J - 3 > IB L fc S * T* & ft , S*JC«it*«:i6k:*aW©*^U--f-c>^*>X 
rAif-H (100) *'I«*A P IMSf nfn^7y^T5. t <D £ ffi T- tt » il ft * 
^ff t & £ ? ft {c $ $ £ ft r ft ^ Jf £ , * » W K * t3 T * i> Ka-f->'^f 

a * mm k g h -r 5 c £ ft < 7 7 y y 3 > * m -r 5 c t # t- # § 0 $ fc , n 

^K7^yy-^ 3 y(cj;oT^!f^ft^^M^#M^-y-fc^^i-r-S(:i:t^^i?*-S 

o 

[0010] 

^a-^$fctt^7W7>h3yifjL-*±0. iffSnt^577'J^--> 3 

u - r f y f y x r l t <d m tc m it * ft , 7 7 y ^ - y 3 > * ^ f=f ? t -5 m m m * a « 
f & l- f -v * m « r * o c o <s » m m \c n ^ < o © g m w & s . siciwb, n ff s 

tiTi#^«7yy-5r-'>a>fi:«tt>T^7-i'7yhn>'tra-*A^HSfts«:4:*Ki±-r 

5at'$s„ 77'jy--> 3 >A^7^7yh3yt:a-^oi*^^i/-f^>'y-> 

Xrii^Ogg^M&St, CCOtS&tefSHSft, fil^IfO^IStf r f? t> ft 5 j 
o fttAlf , 77U^-->ay/)'MSVCRT. D L L S fOftSt ^ KO^- ■>* 

av^HLi^itst, c c> S M ^ 7 :/ U 7" - ^ 3 y £ tc £ £ & £ ft , * 5 ■< 7 > 

[0011] 

s 2 o a w « * h - ;i/ & n ff l & v> r* t> o x h - nmmr-h z & ? z. %m$t 

(T ft ft -5 rjgfl^^xh-^j S fctt r^yn-;KD±?4j ^^) * , *fr «S ftT 
l^77'J^--> 3 >lCi«t3i:i:t^5o 7yy^-'>a>OHfif«f> Sft(177'J 
^--> a >'* ? fSO^S*^gt Lt^5^ J; 5 £0*^5 ^^Tt^TORffi^iEiBI 
«lCtfc6Jtl5, i: x fi\ Adobe Photoshop (R) ftifdnyfcfa- 
$ 7? L.tf, -IOWI ndows (ISiSS) Reg i s t ryX>hl)#HK 
EY_LOCAL_MACHINE¥So f twa r e ¥ A d o b e (C* 5 tgf ITI> ■ 
S ^1 ^ JC , P h o t.o s h opiWyX h-;l/JtltV^i^fcJf)?7^7> 
>iOHKEY_LOCAL_MACH I NR¥So f t wa r e¥Ado betCCftP, 
<Dx.y h y Lftttftfi\ *»WOCO«8k:«6 3 5/7fitt 1 &tcfrt> >7 ? 4 7 y 

Y u y ¥ z. - it %> j;d{c, cft^op^xhuxyhy^photosh 

[0012] 

^ fc , * 56 W tt ^ ^^'!'7>h/a--tf-vs/>±|c#a-r5pjfi6tt**ab*««Jk:«t^T 
HKEY LOCAL MACH I NE¥So f twa r e¥Adobe©TKPho t 

o s ho p <o s v> - v 3 y m (0 u 'J x h y x > h y @i k ft ft l r 5 ^ ^ r* , u ^ 

^-> ; 3>^^KjL.fcl/^l-&, cn^Oiyh y^ffL^77' , ;'5r-->3y^?>liSLTM 
^ * K <* C tA'T'SS, 
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[0013] 

« « JC , * 18 W tt , 7!/y*-->3>tf£fc»*i&$ftT^*;fc&#ftLft^tetttffc 
i 7 7 V * - * a yWitt Z 7 > u y * + & 0 C ©7 ^ A'5Jffi%©B, S18S(c(i{ 

- * a ;/© *S« ft W T HU *7^7yF7/^-->aya, a-f-A s V->*X f- D 
©R5£fr6S«'rS&Ha<&ST f -*'<-X07 HUXKoi#»T©KJ£*tt#8l*C 4: * 
W»f C©U"V>XM.;*-{4HKEY_LOCAL_MACH I NEICfi 

»?n«Ct!lC*^ftft, £<D®j£liir y <{7 > b ? y\£ * tiZo a- 

if-^ffiao-r-^-^-xtcsa-rsicfi, >7Y7>f^s^>x h - a/ t « ^ , £ ft 

.ttCOUy7hU*-<D«I*S*»oT7^»J{r-J'ay4*fft*fttflCl/J>Xh>J 10 
*-*^Hl/fttt ft tfft^ft !/•><> LfrL, *38W3*IS:l , r5«'&, 7^'jy-i/3V<D2 

*Sft5r-'*^-^K»IH'C i *S«t3tcft5o 
[0014] 
3 yy-^-X b 

C <Dmmtt& 2> tc tb , X r A ft <D 7 7 -f ^ - hny-r + X bT'§7yijy-->a > £ 3i 
ff t 3 C t T* f § . 7 / 'J y - -> a > IC ^ L T y X f A ^ t" O J: (c 1 x 5 A\ $3 & I? 
?©^i1tttlCO^T7 , 7'('^- hk"i-/)^xf.tl§„ * 5S Bfl (4 , ^OBtOliKfCfc 
otLn^IItS. g 2 t'li, 2 O © {S gij 7 7° D -ir - -> 3 > ( 5 2 t 5 4 ) S ft « 1*0 C 
7 7 'J - •> a > (010350) ©20©^>-X2yXK::/7^^-Ka;yT*Xh£fll 20 
«t5tt^T*n. :©77'fA-h3yf*XhT'[i, utl5«77U^-->3y| 
ftli^y^^yXA', yxf Alf-ex, tf| j$ , J; r - 2 © ffl 5?U 3 fc! - £ ft (4 g ft 3 

n tf - * f# o <t 9 t * %. % „ # $ l $ fill 111 ® t* t4 , cn^yxf 

[001 5 ] 

COlSilSrsckT. *52WOt^l/-fOi'"yXTAS-F (1 00) (4 , « 

ac77^->3y (52M4) #-»$;fcttf'ST©fi«ia£*«*r"e*sj:3ft 

, RW- M»«nft3yf*Xh«a«t«Ctt>Tf 5. COCttt, Mi c roso 
f t 0 f f i c e ft E © 7 7'J *r - > a > X -< - h ^ , gij © 7 7 V *r - *s a y # £ f 
Sfc«ltt;&tSft?T<*7:/y*-$'3 yjct-pTMg T ; .£ § . ft i: * , * - ;l/ v - 

* £»f£f£«8fi££flf7-f 5 ft* OX > ^ > 4; b T M i c r o s o f t Wo r dA^<0 30 

77n-y3yTfi?tiT^5. c©j;^i77'j^-y3 yawo r d © 4 y x b 

-;USft{4*»tcM-r51ffB^»l »K Word(D|«*«JiT«ft(tntf464^. 
U ^ Jl flt B B X- « , mK7-9V9- t s3 y02oo-fyx^xffH£T*»-03yTt 
XF«ttSL> -73, 20©»Jffl©7:/.y*-S'a;'#:/7^^-h3>7 i *Xh*li8F 
t5, 0 3 lc ^ L ft J; 5 £ , 20C77'J^-y3y ( 5 2 1: 5 4 ) £ H ft h£ T* & 

t'dz-f-fy^yxfiif-F (i oo) # , fufflpjeift^xxAuy-xoft^tfa 

[0016] 

asm 

0 4 L ft «fe 5 K , * ^ U - r w y 9 ^ x f h il - K « & © 7 X 7 A 6 ffi fig $ ft 40 
-So T ft ft > =3 7 (1 02) , ffi f$. T * - V + (1 04) , 7 7'f;l''7^--yt (1 0 

6 ) , «W^7-y*a 7 h-7*-y't (1 0 8) , r /W X V * - =J \ (1 1 0 ) , z> * y 

^i-y> (i i 2) , /atx7*--y+ (i 20) , 7Dtxsf7^--yt (i 

1 4) . a -9- (1 1 6) » J: If >J ts * V t * - *J + (1 1 8) 6 « # 3 ft * „ 

7 (102) , ya-bXV^-^-v (1 20) „ <fc OF D - 9 - (1 16) £ B£ < t ^ T 

w^yxfiii, jm t t* i¥ m t s (5 g it y x r a © s jr t* s s . 37 (1 02) a±t 
ix , 7 7 v 9-*y 3 y ffi&y r J frxfemz n%7 7 V 3 y<D? yy-*x b 

* S il t % o 
[0017] 

Hl/-f ^y^yxf Aif-FOT*DtXV^-y> (1 2 0) tCj;^T, S^©^D 50 
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tX«ftBXU»F^y|"*37 (1 02) Kj§fcn?t«<k5fc:£-5o £ K. , 7° d -t: x 
v*-5> + (12 0) fi, ^ot^anoBIi:7U7 KffllOft»C, ^ lx-r -f > 

y - 5/ a y > k ;nct 5 c t # t? 1 5 o 7 y y — ^ 3 y/iyF^iii, r ^ r #s 

^KSiS 1 ) V-X^«Wt5^ntX©^;l/-7'ffe5, fc t A l£ ; M i c r o s o f t 
WordiMI c ros of t Exec 1 1*7 ? V >r - *s a > - jS. £ L X WiWlt Z ft 

46 s , <g s u x h y <k e y 7 << >i y x r a % a *r r 5 # & s . 7*n«v^-y 
•v (i 20) (i , Lti&ojyn-i/ayny K;l/% r 7 7 y - V 3 y J i»4t, 
/Dtx7^--» (i 20) ^7^y-5r-^3>©i»]tt%ffi*«n*S'T», 7 y y ^ - 

«ess^*sii^, 7?y ^-y 3 y^sKfnTv^^i t».n- K#5rf?gT*a&5. 

[0018] 

««*.(Ei8 Lfc »> , fXTift^filM^tsStSCi/i'TH, n-jf- (1 1 6) 

o &m\tv -7 y *t txztut . □ - - (1 1 6) k w l t * « * y y 7 /Mt u , y 

/^-xyn-bX5ICTtifiE*«!flt5CJ:^t'f 5„ 2 £ fi > n - * - (1 l 6) it IS 

[0019] 

u v x h y t m $ 20 
7 y y - > 3 y % ie l < m ft t n s \c « . a-<ra*o«fiEisa*^si?*5. 7 7* y * 

-^aV^SlS^llJlSSC^Tf 5i)SU3-Foa(i, -tf n £ & © 13 H K £ 

£ 0 wi ndows (sttHiffi) t»tt, flna««^-«Ktt«sn*»}m* ,t 2'ofe*. r 

ftfc^, Wi ndows ( S Si ig *f ) Reg i s t r y ti-Xf AH;H«ft77^ 
;U(win. inifc <fc system, i n i) T*$5, ¥WI NDOWS ( 

a ft ffi ffi ) KSYSTEMr-f Un'Jtt. 7^U^-5'3y*'7^ , J^->'3 

&i£%rci*mmit7 7 * fr* £ < m%&ts®mx-&z>o zk, 7 7 y * - > 3 > « , a - 

* ;U 7 7* y ^ - y 3 y r U * h 'Jrtottf7 7-<;i/iftttf-*7r'f^*ffiffllT, 

ndows (SSffift) K}K0 7"7^7*-iKliReg i s t r yKfiStStOli 30 

* ^ > «l£19«tf«fc<teiMSft5f f *l'*MJ# t #ft'rSo X Wi ndows (S8 
i&g) tc«, app-de fau 1 t sf^nUi^S. Mac i n t o s httiS 
y s t em Fo 1 d e r # & 0 , ^<Dfl&<D*^U-T*y7i/XTAtC(iWJ£;-fSg£ 
tfSfttS. $ 0 2 (C /t; L It <fc 9 fc , 15 t h if <0 U N I X (iRill) J'XrATIi, 
I^OT/n-yay ( 5 2 fc 5 4 ) ftlfn^f ©ilS (1 52i 1 54) 

;U fc <g $ft T 5 c t I* t A, if T' h -5 . 
[ 0 0 2 0 ] 

*58E©-mBIB«fctt, ISW i ndows'(illll) Reg i s t rya^*- 
*7h*^$fl5, C <D n > # - * > h 8 £ « fig U- ^ X h '7 £ 7 7 s 'J * - -> 3 > t tl « t 
Stf, S*->XTAl/-7XF'JlC^t5|gttRitt5o 77'/'!r-'>3 7* , 7nxt 40 

•5 C ttf T'f So C <D 7? & T* (4 , 0^77f iif-F (1 0 0) i: 

Wi ndows ( S ft i§5 <f ) Reg i st r y # , US?X h 'J icr f -bX t SftftO 2 
8Hl7 , n-feX*JBj«T*. 77'J^-i/3 7*' + -'\«7 7tX§^gi:t5|§, 77° 
•J ^ - 3 y »4 R e g i s t rytelHJI^ ^l/-f -f >?->Xfi»fl- Fli, 

*-^<fctf + -©ffi (ffl?rft]^T^5li-&) T'fcQtZo fU'S^i^, ^^U-t-i- 
>^'>7rAtf-FttS*^Wi nd ows (gftF&SO R e g i s t r yl:T*3i$£ 
*SCi:*ffiFBl , r«o fflOEItfK* 6 n fc « , ^l/-f O^fXT Af - Ftt, 
^nS#(C7ott-?.gM<0*I^F5J-r^„ ^@7y^--73VA^-lC77*Xt5tS, 
f © + -li^^l/-fi' >^'>Xf A^-FrtlC^ftL^ S^^H^WR e g i s t r y 50 



JP 2004-533054 A 2004.10.28 



s v vt ft & $ -r , suti4v\ 

[ 0 0 2 1 ] 

o C ft £> ©tf^ V 7i/ 7. t h if- H C ft 6 ©-fe 7 a 7 T*., K*?*-©^ 

S> * - © # ft © ffJ Bt, Sftai/f Xh'jA0fl/^*-0liD0ft»03WFi:lT 
?g £ £ ft 3 „ LCi^lCLT, figl/fXh'Jtt, ^< ->Xf AOlil 1 ? ttliltSC 
ttft'tS. coctii, *-©WII*#*-©l&IS©'fi£EI tifilciSic45 Z t tf? 
t 5 ft «> , iSt*65, 
[ 0 0 2 2 ] 

»H^Htl8Tll. ♦^U-f-fyyj'Xf A*-KttSf, 7 7* U * - *7 3 7 K *f 10 
t§i$i/->'xh'Jxy F l J^tCsf-?7 7^;^D-h*T5„ * tc , n. - -»f - © s * 
it5St?^2 0f-^ 7r^;l^D-K?n5. ft ft (c , * ^ l> - f -f " 7 7* -7 7 f- A #* 
- K tt , a--»f-^±»*%»[±SftTV^ijpy->-as*^ty-ao4 l -«rffSt»ca- 
FT'f 5, C © 3 "7 CD 7 7 -< /I/ « J® fc P - K S ft , §7 r yK*3H: lit 5 « Si 
^•s Btj©77'f;l/ft©Sitf±»t£ftSo a-if-^fflJ6T77 p, ;^->'3y^ilff-r 

stf , a-if-@*©'if «*^fiE*i* , 7 y >j y 3 y gt&tSfB©&#ffi-r & ft*, 

S2©f-^77^;HJS«El%^ 0 i^L, gt'r>3yog, *^U-fY>^J'^ 
t hii— Ktta--9 , -©«ert«*«#U, I? ft © -b -y 7 3 yt'ffifflt Sfcfeic^ 2 Of 
-?7r^;^4ft5. 

[ 0 0 2 3 ] 20 
l)K7r>f;l/*2O0^ST'tIT'f 5. 3? 1 © 7a i£ T* « » 117 7^/^77^-^ 

3yiaottgl«tt5„ c © 7? S t* & , &aif 5*^ u---f -r y^>>xfi#- k 

©7 7^/^7'>7>f Atf7 7-<yKOi5i&S^o »£L^flfiSMT*«jD3£f!2©73?£ 
it y 7 7* y >r - *S 3 y W i ndows (f Sifiig) AP I ISG e t Pro f i 1 
eSt r i ng-^Wr i teProf i 1 eSt r i ng&H^RftffctiLT, CtlW7 

K#±iB©fc*5!)Cft&©i*tfttlU*#iJR!? fifflfrZCtlZOWTftillZnfttZo 
[ 0 0 2 4 ] 

±* g * 7 y* x ? h 

y # - * y v it . iao77n->'3yj/iiH>x^xTftS?n5o - fl9 , c 

ft U m ft ft 7? & T* 5 o COjaftt, f-fX^gi^iaTt, Pli;77^l'«^( 

3t:-t§!5i* s %i<\ s ft , «5K(c<sgffl?ft5n-K^5'r77 | j^^^u-f-<yy 

'7*rA^y^--fctf-K^-f:*tfttJ«'EfcT?S*J:$K:ft<5o Wi ndows (S 
fi! fg H ) 777F7*-Afli, DLL (^^t;7?'JyH^77'J) A7 7"^- 
•>3yrt«IS077'jy-i'3>P s Sf ftf ?ti5Ci:)i^l\ © ffi © 7* 5 v h 7 * - 
Af M II it m U T* $> 5 o Ma c i n t o s h T* it , I N I T fc J: 0= * © © 7 X f - A 
3 y 4? - * y h & 7 7 '7 - y 3 y ffl ic a - K S ft 5 . c ft & © 3 y # - * y h fc tt « ft 

o/?-73 ytffpftt, -sicffii jnsoiii'f ne.ono l O © H V h % *§ & # 5 

o UNI X (g&tffig) yXfAfli, P-KWflH!©JItt*'r-rX7gfi©fl|S*$lftir©S 40 
ftt*lifiKtt7y"i^ h ( ft t A " . s o " 7 -T 7* 7 «J 7 7 << >\> ) 7 7 U * - a 
>T-«ffl?ti5, ^<07Dy7AT'BHSO" l ibc. s o" ^UlSftSA', C © 
5'f77 | J7r'f;Kii i be, so. 3 £ if - gp © - -7 3 y\ © y y # U >y 7 U y 7 
T'iStiA^^o H^tcti, ^©ffltgtf^tftilSlfcfB^Ttft. cft&©«W3y# 
-*yr-tt3fcir?ft*ci:#£<, it;3y#-^>K?)^SiD/ i i-->*3y*^>xh- 

;^tl5o 7 7''jy-y3yMill 1 fffiULfc77 F 7i7tfftf3>*-^> FO l 
o $ ft tt - fip © /< - g yto^lffff 3C t^aioTi/^„ <: © ft 46 H t* , 77 
'J ^-y a y it % S © - '7* 3 7%-T77 h-;HT, * © ffl © ^ - '7* 3 7«±»tr5 
:ttf-i«t'S5. * © IS ft , IHJ C -7 7s r A ± T? % \i $ ft T ^ 5 BU © 7 7 U ^ - jy 3 > 
^»f^T t * < ft -SBIffitt^* 50 



JP 2004-533054 A 2004. 10. 28 



[ 0 0 2 5 ] 

Windows (1181) 98iWI ndows (ilfil) 2 0 OOlCfc^TM 
icrosoft tfJiaLft Windows (§H^i) Protected Fil 
e Sy s t em (WPF S) ICJ;D> '>-XfAllitt7/'J ^-v-a VO^-Xf-f 

i/n'JtxxxxLOCAL (xxxxttffiBMftt^frHri^r-oi/fc) ZWifn 

57r-f;^ff«T'!5. C ft K <£ *K Windows (SSfiil) Loader fth 
oad L i b r a r y ti U , KSi*3 

£ K ft? ft T £ K « C tl T~ Ji ^ + # T' & S 0 ^+»T'feai01ftlt XXXX7 T << to 
©-by t-7'y/«JSg^->xfAf If ©ailct6?n5*^T'fe§o -^Xfiill 
©»ltt. At ioT*t41^J55. S20148, ^ y 4? - * y r- © - ->* 3 y £ tc 10 
IC H L T fr£ a - ts l\> r f U ^ r- U ic y 7. h - /V L , " . LOCAL" 7 7 -T Jl *k. 
ft 1 L * »* ft- tf ft Cft^frfcT?**. £ ftfct , WINDOWS (gill) ¥SYSTE 
MKSI«nft|tI*W43>'*-*>'h*l(I^Ttt, IK ¥ ft 7 n -b X T- (± ft <^ „ 26 
C, C ©ft? ft Be T'tt, ^StJtlSffllit^tltttlt'f 5fcltt'«^V\ Load Li 
b r a r yOjff*. Wi ndows (§I8@) li, 

o a d L i b r a r yCifSeol&SfcLTWftSftfc**, $ fc , . W 45 ft (S 
fc tt ! JB © ) DLLT*Ui:**tReg i s t ry K e y A< # £ f 3 A^if ? AMC j£ 
Dt, I4«/U«St^yf -f n*flt5. C © -7 - X T? ti , L o a d L i b r a 
ryUfritBLteSttC WINDOWS (SflflHI) ¥ S Y S T E Mf -f 1/* h 'J ICffiftJtl 
5, .20 
[ 0 0 2 6 ] 

D L L1S&I}*<DM<D#%3y#-*> hits iRftin^7/n-->3 > ft # 1 L 
T ^ ft ^ *§ £ fi 3 y # - * y V ft % m 2 ft ft ^ C t * U SE f § fc to , # it * 9 > h -b 

[ 0 0 2 7 ] 

t^SI U\ L©Si^Iltl.lc|j; 1 7 7 , ^-'>3>'i!)'i:tC|ffl?t53y#- 
* y r- © M - V a y $ fz « ^ - ->* 3 > © 1 H % » -5 S ft 3b 5 „ * C , 7 -f U * - 5/ a > 
©^ff^tc, *«ijlitt3 y y h A^IE U < ft?ft£ft£ u i: £ffifiEf § c k #a*'LV> 30 

o * % ft t- ti , « 11 A A* £ ft , &B ft ti W P F S £ fc it Z © ffi © * * U - x -r > 
^f^f A*il«t«lt« UtlfSSn*. C © * £ , &Bft3y#-*Vh*l 
fflbTa-rt;i/77^;l/*>Xf-A»cEl"rs&fi#&5. «: © 81 a tt , ^yxr--^©* 

ft sins* »> fe«*fea5*. ftHffte»tf> ^g^ny^-iy f- A^gnc^y* h-;v?n 

T^Sfp, ^yxh-;l/7'p^7Alj;3>'-f-^yh^'fyx H - )l L ft v c £ ft& ^ 
[ 0 0 2 8 ] 

*Wf*t*rVjt^h^iEU<p-KSftS£:i:«>iaE'r*35rffi%«gij-r*^Btt«<*s 

„ Windows (igSf) 7 , 7'yh7*-i»t'li, MS VC RT, DL L^C<OP9i 
0*t4i8T*5. C © * 7 y* x * h © ?S 1 © * - ->* 3 > ft W. n £ ft X V Z Jf £ , ± $ 40 
©Reg i s t r y*-*BWlc8iLT, LoadL i br a r y M S T* IE L ^ 3 >«t? 

5CiT$5„ C©^^/^X(Cj;r3T, ^xf ^ F3 y y Koilc a - * 

yiK-*y h A^j^-f ft?ft^ftS. EL^8^*7^x* h*!ft-rs8iJ©2fiStt, -> y # 
4ffifflt«ciT6«, W n y # - * y h jc ft l t •> y # 'J y * u > f * 

JS f ft , tfif (C^y^a - $«7 7'f/l/->XfA{CJ;r5t * *f n y ^ - ^. y b ^ 
g^nyl-^y Kent t5ioii*t§c t A< T* 15, 11 © 7? rSkLT, VkM*7 



JP 2004-533054 A 2004. 10. 28 



Wtb 5 7 7 4 i\> © IE L iw< - *J g y fc (r1 T f) W K IS g f 5 c tA'T'f 5, 
[ 0 0 2 9 ] 

^<Ofr ©8 giJftJBffll Windows ( S Si iS tit ) 7° -y h 7 *-i»t*fJ , 

ft fx * © *I 8S[ £ fc li f ^ T © 7 P-b XHT'^n-z^KcftttSi OLE, ODB 

c, m d a c , &&x}*<D^<D^y#-mM<o%&<»^yx-*yvft9*)k%*iT^z> 
o o l e © tj§ £ «; , isijyDtxMT'f-^feiif^ty-ssT'j^^Wfns, c 

ft€>©3>#-*>h<0£< t Is) «HC , O L EiJO L Ei#0tttt03e-tf-fiK*fT 

gt?n§OL EOM-^s^^irnt'fen-FtSaffff, ^UM-yayOOL 10 
E^ffifflt-^sy<D3>^-^>hi;-trv>r^^X*«W-r-| l c:i: i toJtiT'fe§o 
[ 0 0 3 0 ] 

-Kcn-KtS^Siii^S. 3>-#--*yh£77^^-Ftcn-Fr3 7c46©77i£« 
, ay*-^y h©^t47>n- F^syov7 H ^x77yin-->3 y ( * u - f- 

-f > 7* > X f A # - F fc <fc -p T 7 >7 r -< 7* fc S a ? ft T ^5 if 5 frK. b 6» f ) E« 
f § E L f 3 > # - * > h ©D - K * W tf T « * £ ft V „ 5 fc , •> X f A tf^ 7 7 a 

[ 0 0 3 1 ] 20 

^<c077 P U^-->'3yti, Mx> F U ffc ^©ffi© 77 L>^-~>3>f-* - 
t5fc»li:77'J^-->3yrtT?f-^7 7^;l'^Sfflt§. * 56 W3 ti > ± IB © fit M U *7 
xh'J fc 85 fflL/cfig77^;^ Xf ASllt5„ 77^-^3 ytfS»**fljfc, 
*%Wli7 7-i'/l'->Xf AgMrt§©'JX h * n - K t S C i: T* f I . S M § tc fi , 
7r-f**fit:t, €«SR^fc 7 r -r" ;l/ £ ii in t 5 c i: , ©»J<D 7 7 -f /1"n 

7 7^^'J^^b^ Ft5Ckft2tfSSh5. 7 7" U -7 - ^ 3 ^ 7 7 f fc 7 * -fe 

x l fc d 7 r * m m l tc m f* * ? 4- ^ u - r w > y x f a # - f # , * © 7 7 f 

;V * 'J 2" -f U * FlTS&B^&Sfr^fr^x-y^L, 'J * U * htS^fi^SS* 
» s uv"»*«i»«Ttt, foil^^^u-fryy^fAfl-FlST^JJti 30 

II m fc V $ 4 \y >7 V f 3 0 
[ 0 0 3 2 ] 

3.~^-(Ou - h' ? J 71C m% & tStz ft IC7 7 V * - y a >tfmM7 7 J )1<DW&% 

6 ft ^ „ & T* 7 7" U y - a y*'Sn-Ffti5l^v C © 7 r ■< il> v -y tf y y * * ^ 1/ 
- f - y > y 5/ X x A # - F © fi *«R M & fc flf n - K f 5 <es B # * 5 » a - ¥ - © a - * ;U F 
7-<7±tcf 8t5i^7 r -T^O*IGK*3a«*-9 fcJ»^. ^^foy^fA# 
-Ffi^©77^;U£U^U£:>3>4W>hJcae-LTfr?>, g*^«^Lfttttl 
tt* ft 6 ft ^ o 7 r << h x © $ £ ft v -y tf y y * {S fi f 5 re 46 ic , y jf-f n» F*hft7 40 
7-f;Ki7C©7 7'f^i:Hi;*l!Sl?»9Ttt4 64l(>. ff * L ^ H t& T ti , ->XrA 

c © <k ^ (c fJk o o 
[ 0 0 3 3 ] 

C©=fc^ft^li{tT*(i, 7 7 F7i777^-->3>^gg(llOf-^fr61tfft 

Xh'J^-x©ffi«5figti> i-f-lfit*Sot{.->'Xfi 1 7^ Ft-fe^TtiV 1 . ffi ffl 
Jft577'J'7-->3yS2ffi'>Xf §7 7-f^)!i^n50lS©^fnf*5A^ 50 



(11) 



JP 2004-533054 A 2004. 10. 28 



V - * T 5 g tf & 3 0 ^^Iz-f-f yy->Xf A#-F->XfAtfI«lC 

il ft t 5 ft i& »C a 4 O „ 
[ 0 0 3 4 ] 
x'W X K 5 -Y ^ 

3 y (4 ^ A-F-)i7t*-Hf;li^^l/-f^y->Xf At© 
fiU'</l'Oll»WfflS^fflS:H-aJ<0«(iB«:J|S{t-r*fe46tC, r/W X /< S ft 14 

^offlo^^iz-f^y^i/xf AL/^/vyyh^iT^iffit^o * « w -e a , ;* ^ u 
ttbTfjft^ f it, ft s < < y 5 ^ - mc £ fin & £ t>* ij i& T *> «t& *i«ts, 

[ 0 0 3 5 ] 

KOT^wxF^-r^B, ijWJcn-KBrfti-pfe^i^Kfliatsti*. sj *g v & n tf t 

< T © r / W X K 5 -Y /< £ ®) W n - K T 5 C £: tf , g U ^ ffi B fig T & 5 . jg ®) ft K 
r / W X K 5 -T A Z m W tc a - KT5&Btf 7 7 s 'J *r - is a > * H f=f T 3 Iff (c 

a--tf- tt c ©fcliK&fllT (^ft ttntfft e> ft ^ 0 ->X-f Lftif£> T ? V * - 

* a >*1ltl®#)tL1tt £ ZfrbmVl? tWSL&L^o L^L, x x K 5 -f © 
(S t A, £ « £& to fc 7 y d - k 1" 3 C i: tf T- £ ft ^ . F7^/^iHWH:7y d- K tft^c 
i: tf S S L V> tf , c ft tf H 31 T* £ ft v> t§ G f4 , * 0 © ^ S ib B$ »c ftj Mt T 5 <fc 9 lc F =7 ■< 
i'v-nns. a-lf-fcc©cfc*«fti-r«<:i:tfH£L^. ^@©S®I!j©hu©7 
7 y - 1/ 3 >lfT* ! 2iiT'j&5lo, x f a a k 5 -f ^ tf # a t § c £ * is m L , 
2 & § © f > x h - tt * f ic s & 7 * w ? x $ & ® onmmm icm&Bj m % =1 > x 

[ 0 0 3 6 ] 

5t^*«fa^»t*Ct*^l5Jl»a&* 0 f8t5->XTAA-F^i7ffl(Df/^XF^ 

c ft « » g t m &i -e a ft ^ tf , * ft m © $b a * & $j -r 3 «, © t* a ft < , # »j ft a * 

[ 0 0 3 7 ] 

M i c r 0 s o f t tt^O/7 y h 7 * - A T' I J , r /W X F 7 -Y © & V # S ft 5 c t 
*^ f o Ma c i n t o s h^X'rA(iffWK'7-l'/ < ;i:ij!lWK7'l'/^©M77%-9-^-ht 

* ^K5"T'^(i-r^T(B]U7?ai:l'yXF-;l/-giJ|^$n-So Ma c i n t os h > 
Zr-LytJisincoyttzctic&o. ^S%*#-FA'«ftl5. UN I x (Sis 
M9) >'X7 1 A^T'fi(^i:^i:©li^'. f ^ 4 X K 7 -< ffi ffl t 5 ft #> K , ^f7*©UN 
I X ( 1 » a fli) A - ^ ^ * g S U ft ft T* H S b ft t7 n ff ft h ft ^ 0 co/ntxii* 
'fit ic M$S ft 41 # * 5 o ((? $ Ll^ 36 as $ » "P tt , C © y a -tr X AM^I ffift ft £ tl 5 (77'Jt 
-^3>^7^©*-^;Uy-t«yhftif) 0 CdD7DtXO-IR«*tttt 1 Wi ndow 

s (fiftffifli) 77y *-->g vtco^TKWLfcfctt (£is©«*jaaaH) ^irjut- 

*5, C©J; dft^^b-r-r > ^ X f - A fc U ft a - +f - (i m £ H) % Hff f 5 C t 

T* * 5 o 
[ 0 0 3 8 ] 

A ft ic > X f - A m m tfi ft 4 L ft H ^ »c K 7 -< * @ « • HU Nt V t 5 C i: M S U 

fttfoT, ->XTA©^±tt^^}t-r§fti6tc ! ^sft7 ? -^sft(iyD-bx«-r^t*5g 
© s? g l i/> * ss « r* fe § „ $ 6 , i/> •r n © a m © f* / w x F7'f/<t*»iKj:5 

T«P^S<gft«^^W(c}l«$n5i:(iffiP,-r, coaii, f»cf SOa- K!>x7 
[ 0 0 3 9 ] 

* » W T (4 ^ f^#*^U-f^ > ^ > X -r A ± 7? (4 * n 5 © ®J $ ft (4 # ft ^ il tf S ft § 
t>©t4*fSW©i/^<o^©3>^-*>h©**c4:tfBii)&n*.- efte>©3y#- 



(12) 



JP 2004-533054 A 2004. 10. 28 



[ 0 0 4 0 ] 

-»c7^yy-j/3 yt*tt, iEi/<*[ff , r*fei&K7*^h*-ryx h - ;u u ft tt ft «r 

ft 6 ft ^ „ ^g47*yMi^fnt, t'<l/-fO^'>XTAtf-FiQll73"f/l' 
T'llfnS, * ^ U - T J > 7 is X ?■ L JS - F It 7 7 V >r - is 3 > <D mfi IC 9ciL T C 

n&<D7*yh£wa!)KL, «ST*ntf, n tf » t 7 * > h * m ® t s . 8tA,^of 

X r L IC it , 7 * > l>5;lgtS7'n-lr^Sftli7*> h©fpft£->X'rAfc:i§fc]-r57 F ' 

a -t x © as t , 7*>h£$«?-3;ttWM;v<& , K t^b-f ^^->^f 

[ 0 0 4 1 ] 10 

Windows ( g ft $Hf! ) T" (i , 70 HilW I N DOWS (Igffil) ¥ F O N T 

7 * > h # fij ffl r- 1 * c # % ie « n 5 1> tt t- u * ^ „ » $ l ^ mm & m t a , 7 a? 5 

A Windows (SIKi) AP I ^gffl Lt 7 * > FC 7 t X t 5 i^, Cr 
eateScalableFontResource/AddFontResource 
ft if © W i n32 AP I «f tf W L T7 * > h 4 BS t « ^g*'** . C ft £ «fc 9 , 7 * 

X r A *f — K it 55'J © 3f 93 ft A P I Xf tB t (RemoveFon t R e sou r c e 4 if 
) ■p7*>h*HiJ«tt, > X .-f A P> 7 r ;l/ £ fflj ffi t 3 C t tfi X- * § „ ffl<Dnffi&Mt 
IT, *'<l/-f-fyj f J'Xfi l <f-Fttfi8l/j'^l« l JStt'PKWl//iJ:?KAP I H 20 
S*7f ^tSCfctf-Pti. £ 5 , t^U-r^V^i'Xf Af- Kli77^;Ht7' 
^XfAtfifflbT, H fgl © 7 * > h 7 r -Y ;V- Hff £ ft T ^ 5 %/ X f - A »c SB B £ ft 5 c 

[ 0 0 4 2 ] 

Macintosh T'fct, C(D7n-bX«ggft(bTt3 0. Mac intosh;>X-rA7 
t/l/?l«J<!)7 7^;l/iSS7*f ^7fcKl^^T^8. LfrLUN I X (Sftffift) T? 
« , L07u-bxii77^--> 3 y(ci!(/ft5 0 ® fe - fl§ w tc « , $ ft ife 1 m T- ft? ft £ 
ftft31S77Y;bi;LT7*yNUV-X#yXf-Ak:31fto£tt3fti6, 7 * > h U V - 
X £ £ bu T* 7 * -b X f § £ i; T* t § o £ < © M o t. i f •> X f A t' li , 7 * V h §g $ £ 

7 * > h y v - x 7 7 f ;nc Be B f § & S * § . c ft fc <fc 0 , 7 * y h © 8? ft # bj K 30 

ft 3 . Mot i f $ ft » X 7 7 'J - i/ a > it , "fl? ft 7 X -r A £ ft it ft it 8 Pf t>* t±J L 
©^•fft^T7*>h*iifl/a-rc:fc^T#*o « 55 T tt , Mo t i ffc<fctfCDE"<- 
X->XfAC^<t\ Ad o b eX-r-57^#XhX?'J7h7*>htffiJffl;*ftTI/> 
5 0 CI CD 7 * V Y it , Adobe M7lifXfAT'f It ft /c L P ft 

ft&t) , t'i&<D£*>K. Windows ( S ft jfii fll) £ ft it Z (0 i&(D * ^ U - 4 > 7 is 
Xf AOHS7t>Hl->Xf AlCt^feS-yXf AA^St5 0 , A d 0 b e Ty p e 
Ma n a g e r it , f(ficD-9--F^-7 L i'cr)^'r7ga>'XrAi:|B]«tc, c(07D-bX 
Jcftff-ry*7x-X**«-r*o a i: A/ if © * ■& , L(D^y^7i-XHI-Ft5 
friatfifrSttftSCiitfiSLK *^l/-T^y)*->Xf Af-FOIWli, Cft 
5®-yxfAi^t(c«(5t«iaffl^y^7i-x4lttt5i:i:T*(i5<, #^u--f 40 
•fy^->XfAHSOf7->XfAKW(£t5'fy^7i-X©&Httt5i:J:T'fe5 0 
[ 0 0 4 3 ] 

S«*a©RS.*iSStT577'y*-i'3>'ii^\ C © c i: (i U N I X (MM) 
•>^fAIC|tJ:<STttS5«i, 3I0UNIX (§®SilI)±T'»#ii$ftWindo 

ws (gmmm) t^b-T^yy->xfAic^i?nfty7 h , 7i7T'ti«gistfi 

^E^ffl^ft^o Wi ndows ( m m m M ) ^b-T^y^yXfAiWJ/'jy- 
'> 3 y li D O S PATHBU«g»»c»<flciffU» 7 7" 'J >r - > a > 1151 W © x > h «J £ ,1g 
StKi:A'|l\ Wi ndows ( S ft ft flR ) 9 x/MeHifli, l^WCIiDO 
S ^ 7 J/ X -r A T* h 3 ft * 8 JTI 5] fi6 T' & 5 £ < © S3 % ,(S Xt- U ffi "T ?> „ 77n-y 3 y 

s ft (* en? © n « s si; t fit * i» m r % *es a # & * « a , 50 



(13) 



JP 2004-533054 A 2004. 10. 28 



-t 4 yfi/KT- ufi- K it , g|fifK7^'jy-j'3 yo^^yyatxicWLtcn 
iiiii c n e, ©f tftii u *\ u7x mj tmnzv-zr * kt- u&m&t zmm- 

[ 0 0 4 4 ] 

nil 

C T'/T L T f ft ^ < o^O^r - XT* li , *^l/-r-fy^^XrA*IIISK:SSt* 

w ft tf ft 6 * ^ o f/wxF^A^tyhA^i^nuitfit 1 . * e. tc , *so 

t T*S 5o *-iU-f -O^i/Xf i^-Fai'Xf AlcWtSf IS:lallL, T £ 5 ft* 

wf <fxfi^efi*iST'?*itntf4^sv\ gij <d * a -e « , 7/^-ya> 
.HTtIll:?ti5„ fcfSLgy©IS«S*»-ett, ^M^ffioltcfc^-pf 5J;5Cf X 

x ^ O £ ft 1^ t K * W S C i: *^ T? * « ffl CD ««{ 3 > Jl? - * > h t U T II a -ft I" S C T? 
15. 

[ 0 0 4 5 ] 

iESfbowtP . 20 

ffi O $ij Sf {C M ? 5 . #$b^$ttJBJB-Ctt, V 7 h 7 x 7 y X 7 A © IE L ^ « .1 * fit $ fc 

a»?t«it»7Dy7i 1 *'Sftts. s ft , ->xfi,tiot(g « ft s n 5 si h * s fi 

[ 0 0 4 6 ] 

i ft 7 a 7 7 a x a s m m © « ffi * §? ffl f 5 ft * ic ffl w n m © 7 7 y 7 - y 3 

ft 3 „ S ft 7 n 7 7 A « , 77V7-^3><D-4'yXh-;l/7n-tXB#, 7 7 l> 7 - 7 3 
> © H fj P# , Sfttt^OjW^FT-COlgffl^^^tSlff-etS. » £ b ^ ^ « MB X it » * 

^i/-f ^y^^xf a**-k^7 7/<-77'^-'>3 x;l*iilft§o y>xf- 
;U & , £ ft V 7 h 7 x 7 l lU « ± {£ ffl L ft , 5 y - 7 7 y 7 - f a > ti V 7 I- 7 30 
x7<Dr£ft-f-^T£>PifflU X h iC-O^X * ^U- 7 -C V ^->Xf -FlC^t^^^? 
o c©8»y*h*«fc, 7 <y - 7 7 y 7 - 5/ 3 y it , ^©{IfflHttc^-^-ri-y 

[ 0 0 4 7 ] 

iffltss^, t^i/-foy->xrA*-Fii, -r >x k -jittzommKCD&Ati 

t*$fr»It * kLXtikmt 5o OXF-iH, & © P - K IC * & T f 

^T07 7^;^i^ftif^^yyt5c i:^X't5.C(D^ffiT'(i> -f y x h- — /V tc <fc 

77'jy-'V 3 yofffi^|c^^l/-f^^->XfA^-F^fffit5t, SUafcWT 40 
Sie^SMOER, S ftti1S$7 7 f ;l> © H ft tf *< n] HE * 3 0 
[ 0 0 4 8 ] 

* * U - 7 -<• > 7 ■> 7. 7 A 73" - K tt , ft Sa S © ft 16 K If |g * 7 «y - 7 7 'J 7 - -> a y ic 

mto itft L^^mmmmx n . > x t- a am^ a t- 1 5 g ft x y h y k m a , t^u-f^ 

>• 7 ~> X 7 A g] W , 77U7-->3>@W, SftttK/Y>H*©*PKT7y/<-77y ' 

7-^3>#7n77A£ft3 0 c © m « t* . $ $ m § s ft af ©ioi>F y © a a © 

ffiffl«M^SW7«<k9fc7D-bX©m7)^^li-r?.fti!)(cfgffl$nSo » * Li/^ M B 
m X it , J y >f*mj£? Ztzibic, ;l/ - - X y X x A £ f 1] ffl L T\ gti^nft 

ftf^tMi»i©->7y**jti»-r?)o 

[ 0 0 4 9 ] 50 



(14) 



JP 2004-533054 A 2004. 10. 28 



* K J: oT SHU ffS#tt«<«0*H*ff«L, 7^n--> 3 yH;^ 

£ So 

[ 0 0 5 0 ] 

BlTtt, *«WO-HJfi»llloafl6*^bT^5. cOHSSMr-fcU 7 7 U *r - is a 
>/a-+f-f f - £ (6 0) ^2t7F$5„ sj-^U-xi'y^i/T.xA^-F (10 0 
) «U 7 7 p Uy-^>ay ( 5 0 ) 0 2O0^yX>y^tfI^Kf »>iilfc*BiJtf * 
o i: fc ± $ J; ? , t^i/-T^yy'>xfAi!-F (l o o ) itmmitu^^tLX 
mmL, ^7-f7>'h3yt: a -^077'J^-->3yV7h')i7 (5 0) hH^©^ 
^U-r^y^S/XT-A (10) t©Plt3vyKtIfl?lRIt5„ & £P T' 7* L fc <fc 9 
fc , -Sfonvy KiU^l/-f^yy->Xfi»if- Fty7 h^i777'^-J'3y 
i: © IB K: & 3 . C<DZ ttK -»«ft-f>Xh-Jl/tl^t'S5. ~lRW4-fy^h- 
;U T* « , C ft £ © 3 v > K a :* ^ U - r f > ? i/ X r A |-*-| % IC <£ o T f? * ft 3 /c to , * 

^iz-^oista^f it-aL%^igi!i^7^7>h3>ifa-^ i;:ii:5 0 

, fottonvynu^iz-f -fy^>XTAij- v % m & i, r * ^ u - t- -< > V z/ x 

[ 0 0 5 1 ] 
[ 0 0 5 2 ] 

[ H 1 ] * IS 8U ^^b-7"-f>^->X^A. fcitfV7hCx777'U^-->3yOtl 

[02] *7jkt7vy?m®T'3bZo 

[03] %7jif7a>y >?ffimX'&Z>„ 
[04] *Sf 7B7*BBT*S. 
[ft#©tttW] 
[ 0 0 5 3 ] 



1 


0 




7- 4 y 9 > x f- A 


5 


0 




7 7 y - 3 > 


5 


2 






5 


4 




7 y U-Jr - S/ a V 1 , OX?yX2 


6 


0 






1 


0 


0 






1 


0 


2 






1 


0 


4 






1 


0 


6 






] 


0 


8 




«t*7^xi7 h v * - y * 


1 


1 


0 




X /W X V * — y 


1 


1 


2 






1 


1 


4 






1 


1 


6 






1 


1 


8 




V * U T * - >* -V 


1 


2 


0 






1 


5 


2 






1 


5 


4 







(15) 



JP 2004-533054 A 2004. 10. 28 



[0 1] 



>i * 

Is 



6tf 



31 



[0 2] 



-^5V 
. /<ro 



[0 3] 



•5V 

/ (TO 



im 4 ] 




J 



c iit i »* (.,„ 



(16) 



JP 2004-533054 A 2004.10.28 



M/< y 7 U -y r- ] 



(12) INTE RNAT1 0 NA L APPUCATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



(19) Work) Intellectual Property Organization 

International Bureau 



lenniiiUQUiiiuniiisiiiinH 



<43> International Publication Data 
21 November 2002 (21.11.2002) 



PCT 



(10) International Publication Number 

WO 02/093369 A1 



(51) Interna ti*»il Patent C\*i*ir,aHt>n 7 ; 
9/44. 15/16J, 17/30 



UD iDttntsUwal AppikaUoa Number; 

(22) Interna dooil Filing Date; 15Moy 2U02 ( 



(26) PabUeatJao Language: 



(30) Priority Data: 



IftMiy^OKIftW.MOl) US 



(71) Appiicaal; SOFTR1CITY, INC. {USA IS): 333 Congre« 
Sow. Button. MA 02210 (US). 



(72) Inventor: SCHAEFER Sown: <h« (LilHsrm Atciiuc. 
i Marhlehead MA 01045 (US). 



(SI) Designated State* {notional}: AR AG. Al„ AM, AT. AU.. 
AZ. BA. BB. BO, BR. BY. BZ.CA.ai, CN, CO, CR CU, 
CZ. DR DK, DM, DZ. EC. EE. ES, Fl. GB, CD, CE. OIL 
UM. HR HU. ID, 1L. IN. IS. IP. )Oi. KU. KK KR KZ. LC. 
I.K, LK, IX U 1 , |J|, I.V. MA. Ml). MO, MtC, MN. MW, 
MX. M7, NO. NT, OM. PH. PI, PT, RO. RU. SD, SR SO, 
SI, SK. SL, TJ, TM, TN, TR TT. TZ, UA, UO, UZ, VN. 
YU. ZA. ZM, ZW. 

(94) Designated States nwgtonati; Furunwn P*o* (AT. BR 
CI1. CY. DR DK, RS. Fl. TR. CR. GR IR IT. LU, MC 
NL, PT. Sli. TR). 



vtih international starch report 

before iht expiration o) the tint limb for amendinft the 

v'Wrw and to or repuNishrd in the event o} ncttpl of 



=i (74) A j,tnti: KTVACK, Albert, T. c, »l; Schiwdcr I larriam fcr t*o-f,arr codes and Other abbmiatlont. refer to tht -CmU- 
=j Segal A Lewis, LLP. I60O Market Street. ,V>rh FVxw, .w* Sous onCodrsondAbhr^atiorts'nptvnnntiatthrhr^ 



Philadelphia. PA lv!03(US). 



ting of each regular btue of the PiTi (iateltt. 



| (54) Title: OPtiRATINO SYSTliM ABSTRACTION AND PKOTLCTION LAY Li/ 










r- 







(57) Abstract; The praam* invention pruritic* a system fiji creating un application niliware environment will 
operating rystexn of a client computer, the system comprisini an opcrauog rrrrcm abstraction and protection layer, wherein said 
abstraction and protection byer is iiUoposcd between a running software application and said operating system, whereby a virtual 
emirnraneni in which an application may run in provided and application level interaction* era iub«2Bt>aby removed. Preferably, 
any eliangnt directly to the upending nyxlem are jtrtectivety mule within the cunteil uT the running iipphcatiun and the utrdrMctiun 
and prorevtiw) bya dynamically change* the virtual environment tKcurding Iw adtninuuair** settings. Additiutulry, in certain em- 
bodunenij, the system continually taomtcrs the use of shared system rcsoutcci and acts a* a icrvicc to eppry and remove changes 
to system component*. 'I Ik present (has invention defines an "Operating System Chi aid." "these components rover the ptrteclioo 
semantics required by 124 .la and other shared library code a* well as sy*tent device driver*. Toots, registries and ether configuration 
tUea, and environment vuriahlev 
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OPERATING SYSTEM ABSTRACTION AND PROTECTION LAYER 

This application is a contimution-in-part of U.S. Patent Application No. 

09/«S6,18 j , the entirety which la tacoipo^ 

set forth. 

The presort invention relates to eampmcr software, and mans particularly to 
operating system software. 

BACKGROUND OP THE INVENTION 

In many environments, but particularly in eaviramnents where nn application is 
ddrvTTcd via a netwod; the most important feature is an ability to ran applications on the fly, 
without a compbx mstnlhnioii. Typically, in certam prior art systems, great pains were taken 
to modify a cheat system to appear as if a program was installed, or to actmDy install the 
soflware itself, and then back otfl these modifications to restore the original coafigunUum. fa 
doing this, multiple problems present themselves: conflicts between an application md the 
ceinputcr'R current configuration, multiple instances of tbo same or different applications, 
complexity of the bock out process reonires an applicotkm to be put throngh a rigun^ 
to ensure all of its nxxiifications can be accounted for. and the use of shared files and system 
components by multiple apphcsttons complicates back out and the msiallatian process. 
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SUMMARY OF THE INVENTION 

The present invention provides t system for creating an application software 
enviro nment without changing an operating system of a cHent computer, the system 
comprising an operating system abstraction and protection layer, wherein said abstraction 
and protection layer is interposed "berweoj a running software application and said 
operating system, whereby a virtual environment in which an application may run is 
provided and application level interactions are substantially removed. Preferably, any 
changes directly to tho operating system are selectively made within the context of the 
naming application and the abstraction and protection layer dynamically change* the 
virtual environment according to administrative settings. Additionally, in certain 
embodiments, the system continually monitors the use of shared system resources and 
acts as a service to apply and remove changes to system component*. 

Thus, for example, in embodiments within Wmdows-based operating systems, 
and wherein ill operations to the Windows Registry are through the Win32 API, the 
system preferably provides a means for hooking functions, whereby each time said 
functions are invoked another function or application intercepts the call, and the system 
most preferably hooks each appropriate API function to service a request whether made 
by an application run from a server or if made by an application against a confignrartion 
key being actively managed 

In other preferred embodiments of the presort invention, additional functionality 
is provided, snch as those embodiments wherein the operating system abstraction and 
protection layer manages the integration of multiple instances of an application by 
recognizing how many instances of an ippHcatum axe running, and in such embodiments 
most preferably it also avoids making changes on startup and shutdown unless there is 
only one application instance running. In this embodiment it is also possible to s uppm t 
multi-user operating systems in which multiple instances of an application can be running 
on behalf of different users. 
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Thus, the operating system abstraction sod protection layer presents an 
environment to on application that appears to be an installation environment without 
performing an installation, whereby s "pseudo installation'* Is created in which all of the 
settings arc brought into s virtual environment at the time the application runs. Oiintoo 
case of an installed application, acts to dynamically modify the behavior of the 
application at run-thno. Preferred embodiments provide a means for preventing 
information on the client computer from faterfering or modifying the behavior of an 
application, and roost preferably provide a means for dynamically changing the virtual 
environment occonhag to admmistnitrvo settings. As mentioned above, in certain 
embodiments it will be possible to have more than one instance of a single software 
application running on the same client computer, even if it was not originally authored to 
do so. In such cml>odimrnts, shared, controlled contexts ore provided in which at least 
two of said insumcea of a angle application share one or more virtual settings. . 

BRIEF DESCRIPTION OP THE DRAWINGS 

FIG. 1 is a block diagram schematic showing the relative r elation ship of the present 
ffiventam, an operating system and a software application* 

FIG 2 is a block diagram schematic showing 

FIG 3 is a block diagram schematic showing 

FIG 4 is a block diagram schematic showing 
DETAILED DESCRIPTION OP THE PREFERRED EMBODIMENTS 

Refening now to FIG I, there is illustrated a block diagram schematic showing the 
relative relationship of the present invention, an operating system and s software application. 
Preferred embodiments of the present inve n ti o n provide an operating system abstraction and 
protection layer 100 denominated on "Operating System Gourd.** Internally, many operating 
systems 10 provide fault domains to protect applications 30 from afiecting each other when 
run However , shared system resources and many other operating sySem features sUow this 
protection domain to bo compromised. An operating system abstraction and protection layer 
100 will provide an additional programmatkally controlled barrier between applications 50 to 
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remove most application level interactions. Disposed between the application 50 and operating 
system 10 the operating system abstraction and protection layer 100 selectively allows 
changes directly to the operating system 10, versus containing the change within the context of 
the m nning sppEcatioa For one example, in Windows-based systems, all operations to the 
Windows Registry are typically done through the Win32 API As explained bdow, system 
functions like QueryRcgEx and GetProfileString can be booked so that each time tbey are 
invoked, another function or application intercepts the call The Operating System Guard 100 
of the present invention win hook each appropriate API function to service the request, if 
made by an application being actively managed or if made by an application against a 
configuration item boing actively managed, fa this way, unless expEckry configured to do so, 
die present invention can create the application environment without making any actual 
changes to the end-user's system. Also, any modifications made at run-time by thn 
apphoadcD can be penasted or removed easily. 

As used herein the term "Operating System Guard" defines a layer between a 
t uniting application and the operating system of a target computer or client computer that 
provides a virtual environment in which on application nay run. This virtual 
envrronment has several purposes. First, it prevents a running application from making 
changes to the client computer. If an application attempts to change underlying operating 
system settings of a client computer, such settings are protected and only "made" in the 
virtual envirorunent For example, if an application attempts to change the version of a 
shared object like MSVCRT.DLL, this change is localized to the application and the code 

Second, the invention presents an environment to a running application that 
appears to be an installation environment without performing an installation, and la tons a 
"pseud o installation " or ^staflation-likc.'* AD of the settings am brought into* virtual 
environment at the time the application being served runs, or just-in- rime when the 
application needs the particular setting. For example, if a computer program such as 
Adobe Photoshop® expects to see a set of Windows Registry entries under 
HKEYJLOC^_hF<ACHI>rE\Software\Adobe and they are not there on the cheat 
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computer since Photoshop was never installed, ■ system made in accordance with this 
aspect of the present invention will "show" those registry entries to the Photoshop 
programming code exactly ts if they were resident on the client computer. 

Next, the invention prevents information that may exist on the client/users 
machine from interfering with or modifying the behavior of an application. Far example, 
if the user has already existing registry entries under 

HKEY_IX)C^_MACHINE\Soflware\Adobe 
lor an older version of Photoshop, but now wishes to operate a newer version, these 
entries can be hidden from the new application to prevent conflicts. 

Finally, the present invention unlocks application behavior that may not exist as 
the application is currently written. It docs this through tho ability to dynamically change 
the virtual environment according to administrative setting*. For example, in a typical 
instance of as enterprise software application, a client application may expect to read a 
setting for the address of the database to which the user shook! connect from a setting in 
the registry. Because this registry key is often stored in HKEYJJOCALJAAOnm, the 
setting is global for the entire curat computer. A user can only connect to one database 
without reinstalling the client, or knowrng bow to modify this registry key, and doing so 
each time they wish to run the application. However, by implementing the present 
■invention, two instances of the application may now run on the same client computer, 
each connecting to a different database. 

CONTEXTS 

m providing this functionnhty, each application is able to rim m a private context 
within the system To the appBcation, it has its own private view of what the system 
looks like and its behavior. The present invention provides this by its inherent nature. 
Referring to FIG. 2, two separate applications 52,54, or two instances of the same 
application (50 Qlustrsted m FIG. 1), can be provided private contexts in which they will 
appear to have separate or differing copies* of system services, configuration and data. In 
the preferred embodiment, this is the default behavior of the system 
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By extending this concept, the Operating System Guard 100 of the present 
invention can also provide shared, controlled contexts in which two nr more applications 
52,54 Can share some or all of their virtual settings. Thin is important for application 
suites such as Microsoft Office, or fiir applications that perform differently hi the 
presence of other applications. For example, many applications use Microsoft Word as 
an engine for doing Mail Merge or document creation functionality. The application 
must know about the malalbPion or presence of Word and be able to tap into its 
functions. In the preferred embodiment, two instances of the same application will share 
a single context by default, while two separate applications will maintain private 
contexts. Referring to FTG. 3, the two applications 52,54 can ran while the Operating 
fysJcm Guard 100 provides a shared view of the available system resources. 

>ESIGN 

As illustrated in FIG. 4, the Operating System Guard is comprised of me 
b IIo wing subsystems: core 102, configuration manager 104, file manager 106, shared 
►bject manager 108, device manager 110, font manager 112, process manager 120, 
troccss envbrcmrneot manager 114, loader U6\ and recovery manager 118. With the 
xception of the core 102, the process manager 120, and the loader 116, all other 
ubsystems are elements of the Virtuafizatian System described in further detail below, 
the core 102 is primarily responsible for ma n aging applications and their context as 
lefined by the configuration files. 

The process manager 120 provided by the Operating System Guard allows the 
ore 1 02 to be informed of any process or ihrcid event that may be of interest h also 
covides an abstraction layer to the operating system-dependent implementations fox 
cumaging a process space and handling thread processing. Processes may be grouped 
ogether into application bundles. An application bundle is a group of processes which all 
hare their virtual resources with each other. For example, Microsoft Word and Microsoft 
yccel may want to' share the virtual registry and virtual file system to be able to work 
ogether as an application suite. The process manager 120 calls these application bundles 
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"applications" The information about an application exists until the process manager 120 
is told to release the application. If another process needs to be loaded into the application 
handle, it may do so as long as the application has not been released. 

The loader sob system 1 1 6 of the present invention is used to allow virtual 
envrronmenis to be transferred into and out of the running system. Each of" die 
Vacuolization Subsystems is capable of serializing Us configuration for the loader 116, 
and retrieving it through the reverse process. In addition, the loader 1 1 6 is capable of 
staged toa ding/unloading and combining the results of individual stages into one single 
environment description. 

REGISTRY AND CONFIGURATION 

Applications require varying amounts of configuration information to operate 
properly. Anywhere from zero to thousands of configuration records exist for which an 
application can read its configuration On Windows, there are two common places for 
configuration information, the Windows Registry and system level initialization files 
wimrai and system. ini In addition, the \WTNDOWS\SYSTEM directory is a common . 
place for applications to write application specific configuration or initialization files. 
Applications will also use configuration or data files m their local application directories 
to store additional configuration information. Often this information is difficult to deal 
with, as it is in s proprietary formal. On platforms other than Windows, there is no 
equivalent of the Registry, but common directories exist for configuration information. X 
Windows has an app -defaults directory. Macintosh has the System Folder, and other 
operating systems will have corresponding clement*. It is important to note that on most 
UNIX systems, each individual ippficstion 52,34 will most often store its own 
configuration 152,154 locally, as seen in FIG. 2. 

The present invention, in one embodiment, includes a virtual Windows Registry 
component, which will provide a fall function registry to an application, but prevent 
modification to the underlying system registry. All keys that an application expects to 
access will be present, but may only exist in the virtual registry. In this way, tho 
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Operating System Guard 100 of the present invention and die Windows Registry form a 
two- stage process flu accessing tie registry. If an application needs access to a key, it 
wifl query the Registry. The Operating System Guard will respond with the ley and its 
vatoe if it knows it. Otherwise, it wflUDowtbe request to pass through to the Windows 
Registry. If an attempt is made to modify the value, the Operating System Guard wifl 
aBow the modification to occur to itself only. The new time- the application accesses the 
key, it wiH bo present in the Operating System Gcard and the request will not flow 
through to the real Registry, leaving it untouched 

' The keys that the Operating System Guard uses are specified in three separate 
sections- These Operating System Guard keys are specified as commands in these 
sections to modify an existing key, delete the presence of a key, or add a new key to the 
registry, fa this way, the virtual registry can appear exactly aa the system intends. This is 
important as the presence or absence of a key can be as important as the actual valne of 
the key. 

In the preferred embodiment, the Operating System Guard first loads a data file 
that contains basic registry entries for the application. Then a second data file is loaded 
that contains the user's preferences, finally, the Operating System Guard can optionally 
toad a set of keys that include policy items that the user is not allowed to override. The 
three files load on top of each other with duplicate hems in each file overriding hems in 
the file before ft. The first time a user runs as application, the second data file will not 
exist because there will be no user-specific information, only application default a. After 
each session, though, the Operating System Guard will save the user's changes, 
generating that second data file for use m future sessions. 

Configuration files can be modified in two ways. First, the file can be edited 
directly by on application, m mis scenario, the Operating System Guard File subsystem 
described below will address the modification made to the file. Second, in the preferred 
embodiment, an application can call the Windows API family of calls GetProfDeString, 
WriteProfilcString, or othcrB to modify these files. In this case, the Operating System 
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Guard of the present invention performs exactly as described above intercepting these 
calls and servicing them from within. 

SHARED OBJECTS 

Many components used by operating systems and running applications are snared 
across several applications or instances. In general, this Is a very good idea. It saves disk 
space, not requiring many copies of the same file, B also provides the ability for 
operating system vendors and third parties to create end distribute libraries of commonly 
used code. On the Windows platform. Dynamic Link libraries, DIJ jj, are often shared 
within and across applications. On other platforms, the problem is the same On tho 
Macintosh, lNITs and other system components are loaded fin* applications. These 
components can have many versions, of which only one is used at a time. On UNIX 
systems, dynamic shared objects, e.g., M .so" library files, are used by applications to 
speed load rime, save disk space, and for other reasons. Many programs use the default 
libcsa" fkiwcver, this library file is typically a symbolic mik to some version of itself 
such as b'bc.so.3. hi practice, this feature has created havoc. These shared components 
have often gono through revision, with many versions of the same component available to 
bo installed. Application authors have found their software to work with potentially only 
one or some of the versions of the shared component Thus, m practice, applications 
typically install the version they desire, overwriting other present versions. This 
potentially causes defaults in other applications nmning on a system, 

On Windows 98, Windows 2000, Microsoft has created the Windows Protected 
Hie System (WPFS).to allow system administrators to create a file called 
XXXX. LOCAL in the base directory of an appftcation, where XXXX is the executable 
file name without the cxta ns ton. This causes the Windows Loader to alter hs method of 
resolving path references dnring LoadLibrary executions. This, however, is not sufficient 
to completely solve the problem. Fust, setting up the XXXX file is left to the knowledge 
of the system administrator, which varies widely. Second, a component version must 
undergo a rewind back to the original, then install this component in the local directory, 
and then create the "LOCAL"* file. This is not a straightforward process lor any but tho 



-9- 



(26) 



JP 2004-533054 A 2004. 10. 28 



WO D2/WJM9 PCT/USD2/15J7H 

most basjo components placed in WINDOWSVSYSTEM Also, this sohitioo does not 
cover all of the needed functionality, Daring Loadlibiary, Windows uses different path 
resolution semantics depending on whether the compooxnt was resolved as a result of an 
explicit or implicit LoadLibrary, and also whether a Registry Key exists indicating that it 
is a named, or wcO-known, DLL In this case, the Loadiibrary call will always resolve 
to the WBTOOWSVSYSTEM directory. 

DLLs and other shared components also r et ain reference count semantics to 
ensure that a component is not tooched unless no running Applications refer to it. In 
practice, only application a from the operating system vendor and the operating system 
itself have done a good job of obeying this protocol 

As a general rule, it is desired to have a shared object always resolve to the 
correct component. To provide this functionality it is required to understand the version 
of a component, or range of versions, that on application is able to function win. Then, 
when the application is to be run, the present invention should ensure that the component 
is resolved correctly. It is acceptable, in the present invention, to automate the use of 
WPFS or other operating system provided capability, if desired. In mis case, it is 
necessary to detect needed components and place them in the local file system This is 
more complex than jo si watching installation, as an installation p r ogra m wuJ often not 
install a component if the required one is already there. 

ft is desired to identify a method to ensure that named objects arc also loaded 
correctly. On the Windows platform, MSVCRT. DLL is a significant culprit within this 
problem area. If multiple versions of this object are inamtamed, tbo aforementioned 
Registry key can be dynamically changed, allowing the LoadXibraxy function to resolve 
the correct component version. Another reasonable method of ensuring correct 
component loading is the dynamic editing of a process environment to use a valid search 
path. This search path wiD ensure that a local component is resolved before a system 
wide component. Another possible method for. resolution of the correct shared object is 
through the use of symbolic links. A symbolic link can be made for a shared component, 
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which is resolved al rarKimo by the computer's file system to tho needed compen cut- 
Finally, the actual open/read/close requests for information from a shared object'l file 
can be intercepted by the present invention and responded to dynamically for the correct 
version of the file which may exist on the local system or within the invention' a 
sob systems. 

Several special forms exist. On the Windows platform, OLE, ODBC, MDAC, ... 
as well as a number of other vendor specific components, are written to be shared 
globally among several or all running processes. In the case of OLE, going as fin* as 
sharing data and memory space between separate processes. OLE prevents more than 
one copy of itself naming at a time, as do many of these components. OLE also has 
many bogs and features requiring a specific version to be loaded for a specific 
application. In the present Invention, an application is able to load whatever version of 
OLE is required, 6t01 enabling the shared semantics with other components using the 
same version of OLE. 

In general, unless specifically configured as such, shared objects should be loaded 
privately to ensure conflict prevention. Nothing about tho method used to allow o 
component to be loaded privately should prevent it from being unloaded cleanly or 
correctly loading for another software application, whether being actively managed by 
the Operating System Guard or not. In addition, if the system crashes it ia required to 
recover from this crash to a clean state, not having overwritten or modified the 
underlying operating system. 

FILES 

Many applications use data files within the application to store configuration 
entries or other application data. The present invention provides a virtual file system 
much like the virtual registry described above. Before the application starts, the present 
invention can load 8 fist of file system changes, radudmg files to hide and files to add to 
the virtual environment or files to redirect to another within ihe virtual errvironrnem. 
Whenever the application accesses or modifies any files, the Operating System Guard 
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checks if the file must be redirected, and if so, in the preferred embodiment redirects the 
request to a location specified in the Operating System Guard configuration. 

If an application tries to create a new file or open an existing file far writing on a 
user's local drive, tbe Operating System Guard must ensure that the file is actually 
created or modified in the redirected location. If the application is reloaded at a later time, 
this file mapping most be reloaded into the Operating System Guard virtual environment. 
When the request is to modify an existing file, which resides an a user's local drive, tbe 
Operating System Guard must copy the file in question to the redirection point before 
continuing with the request. The redirected files may not be of the same name as tbe 
original file to ensure safe mapping Of file paths. In the preferred embodiment, INI files 
are handled in this way to offer maximum system security while allowing maximum 
application compatibility, 

The present invention is particularly useful for applications delivered over a 
network. In such implementations it is important to undemand that software applications 
are made of several kinds of data, where the hulk of the files a software application uses 
are most preferably mounted on a separate logical drive. Configuration, including both 
file based and registry based, can be user specific and system wide. The application 
delivery system used should mark each file for wmch of these types any file is. This 
m format ton provides hints to the Operating System Guard system to set on a ppro priately. 

DXVTCE DKXVERS 

Many applications use device driven or other operating system level software to 
implement some of its functions such as hardware support or low leval rot exactions 
directly with tbo operating system fn the present invention, the Operating System Guard 
will provide the capability of dynamically, and as possible privately, adding and 
removing these components to an application's virtual environment . 



Many device drivers are built to be dynamically loadable. IT at aQ possible, h is 
the preferred embodiment to load all device drivers dynamically. If a device driver 
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requires static load at boot time, the user must foe present od with this knowledgo before 
running the application. Onoe the system baa rebooted, the application should centime 
from where it left oft However, a large percentage of device drivers are not dynamically 
unioadablo. Although it is preferred to dynamically unload the driver, if ibis cannot be 
accomplished the driver w31 be marked for removal on the next reboot, and the user 
should be made twaro of this. IT the application is run a second tfrpe before the next 
reboot, the system should remain aware of the presence of the driver and not attempt a 
second installation, waiting for termination to remark die component removable at next 
reboot 

' It is important to characterize the base similarities and differences, as they exist 
for each device driver class, to ensure the present invention can correctly mnctkm. It is 
net truly desired to load and unload device drivers for system hardware that is constantly 
present. It should be understood that although this is not a preferred embodiment nn 
terms of programming ease, it is within the scope of the present invention and may be 
required for specific reasons, such as the restriction in licensing agreements fbr 
oppllcrtiorj8 that arc delivered and run pang the present invention. 

On non-Microsoft platforms, device drivers are typically handled very differently. 
Macintosh systems support bom static and dynamic drivers, but they are aO installed and 
removed through the same method. linking with the Macintosh system folder will 
provide the necessary support. For UNIX systems, device drivers most typically require 
a modification to the running UNIX kernel, followed by a reboot This process can be 
very complex, m the preferred embodiment, this process in automated; ractuding 
resetting the kernel once the application is complete The general parameters of the 
process are the same as that described above fix Windows applications, the actual process 
steps of compilation and persons familiar with such operating systems can carry out 
reboot 
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. RnnEy, those of driU in the art will understand that it is desirable to be able to 
recover and remove invert across system failures. Whatever data or processes necessary 
to retain system integrity are therefore * preferred embodiment of the present raven tl on. 
Those of skillin the art will also appreciate that all types of device drivers might not be 
conveniently or efficiently provided via the present invention, most particularly thoso 
associated with permanent hardware attached devices. 

OTHER ITEMS 

m the present invention, ft is recognized that there are several components of the . 
invention, the behavior or presence of which Is different on alternate operating systems. 
These components inctode fonts, processes, environment variables, and others. 

Some applications require fonts to be installed in order to perform correctly. Any 
fonts required will be specified in the Operating System Guard's configuration file The 
Operating System Guard will enable these fonts prior to running the application and if 
necessary remove them afterwards, hlost systems have a common area for storage of 
fonts in addition to a process for registering them or making the system aware of their 
presence, the Operating System Guard will utilize these available methods. 

On Windows, afoul is copied to the \wTNDOW8\FONTS directory. This 
however docs not guarantee that the- font ia available to the running program. In the 
preferred embodiment, if the program oses the Windows API to access fonts, the font will 
need to be registered with a Win32 API call such as CreatoScalableF outResource/ 
AddFaniResonrce. This wffl insert the font into the system foul table. Once complete, 
the Operating System Guard can remove (he font with another a p p r op r iate API call like 
RrmmvcFantRestnirce^ then remove the file from the system. As an ahomato . 
embodiment, the Opcriting System Guard could hook the API function s as described in 
the virtual registry method. In addition, the Operating System Guard can use ks File 
subsystem to avoid placing the actual font file in the running system. 

On Macintosh, the process is extremely similar and based on files in the 
Macintosh system folder and registration activation. On UNIX, however, the process is 
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dependent upon the application. Most typically, font resources ere added to the system as 
regular files resolved in tho proper location, so thoy can be accessed by name. With 
many Motif systems, a font description needs to ho placed Into a font resource fDo, which 
will allow the font to be resolved The Motif or X application can invoke the font cither 
through the resolution subsystem or by » direct call. Recently, many Motif and GDB 
based systems utilize Adobe scalable postscript Soma. These fonts need to managed 
through the Adobe type management system. There are exceptions, however, and as 
stated above, there are alternates to the Windows or other operating system default font 
management systems. The Adobe Type Manager provides some alternate interfaces for 
this process, as do other third party type' management systems. In most cases it should be 
decided whether to support the interface or ignore it The purpose of Operating System 
Goard is not to provide a universal layer for all tbese systems, only to do so for the 
operating system's own subsystem 

Many applications require environment variables to bo set This is most common 
. on UNIX systems, but is also heavily used by software, which was originally written on 
UNIX and ported to the Windows operating systems. Applications on the Windows 
operating systems heavily rely on tho DOS PATH environment variable and often set 
their own application specific entries. On the Windows 9x/Mc environments, there arc 
many environment settings, which are applicable as at its core is the DOS subsystem. If 
an application requires the presence of specific variables, or values to be set in existing 
cmTronmeni variables, the required environment variables will bo specified m the 
Operating System Guard's configuration file The Operating System Guard will set these 
variables for the application's main process when it is hunched. As applications do not 
typically change environment settings as they operate, the virtual environment will not 
trap these calls, nor will it provide tho roll complement of functionality that the registry 
and configuration subsystem does. 



BECOVEKY 

m some cases shown in the previous sections, actual modifications must be made 
to the operating system This is frequent with device drivers and fonts, hi addition, 
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chases cm be mado to the virtual environment that need to be persisted and available 
the next time an application is ran. It is required that the Operating System Guard system 
be able to recover from changes to the system, removing the change from the system at 
its earliest possible opportunity. Alternately, if the system crashes during in 
application's execution, the Operating System Guard should track enough rnfonratirm to 
remove any change to the system If it is rebooted or otherwise, and should trad? the 
changes mode to the virtual environment. In the preferred embodiment, this is 
implemented as a transaction log, but can in other embodiments be done as some other 
similar component, which con be rend on system startup so that changes can be backed 



CONTROLLING VTBTUALI2ATION 

An important aspect of the invention relates 10 control of the many feeds of 
visualization which the Operating System Guard is capable of In the preferred 
embodiment there exists an instmraentatkm program able to ascertain the correct aspects 
of a software system to control. Also included is a method to allow administrators and 
ond users to view and modify those items to be virtu alized by the system. 

In the automated program, the application to be controlled is observed in order to 
gauge the aspects of control The automated program is capable of performing this task 
during the installation process of the application, daring run-time of the application, or a 
combination of both. In the profaned embodiment, the Operating System Guard is 
embedded in e wrapper application. Post installation, or after one m many uses of me 
software, the wrapper application wfll query the Operating System Guard for a detailed 
list of all of its actions. Rom this list of actions, the wrapper application will create the 
configuration files required to load and operate the Operating System Guard on 

If used as part of the installation process, the Operating System Guard, in the 
preferred embodiment, will act as a virtual layer allowing the installation to be entered 
into its envwonmeat only. Alter the installation, all of the files, settings, et. aL can be 
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dumped for reload later. Id this way, the mstaflation wiB leave the original system intact 
and will have automatically created the necessary configuration files. When used daring 
use of the application, tho Operating System Guard ts able to record either differential 
modifications to the environment, or recodify the configuration files. 

The Operating System Guard will pass its mfbrmation to the wrapper application 
for post -'processing. m the p ief w red Btth otHpcdj in addition to the automatic entries 
that the system can create, the wrapper application Is programmed with operating system 
specific and application or domain specific knowledge This knowledge is used to aher 
the output of the process to reflect known uses of configuration items or other entries. Id 
the preferred embodiment, a rales-based system is employed to compare observed 
behaviors with known scenarios in order to effect changes to the coding. 

The wrapper application is also used as a viewer and/or editor for the 
configuration output of the process. This editor, in the preferred embodiment, enables a 
system administrator to add, edit, or delete items or groups of items from the 
configuration. In observing the configuration through the editor, tho a dmini s tr ator can 
also make replicas of the configuration, changing specific items as needed to effect 
application level or nser custom changes 

Referring now to FIO. L, an embodiment of the present invention is illustrated 
functionally. In this embodiment two sets of application/user data 60 are illustrated. 
The Operating System Guard 1 00 keeps the two instances of the application 50 from 
. interfering with one another. In addition, as explained above, the operating system guard 
100 serves as an abstraction layer and as such collects commands and communications 
between the application software 50 and the actual operating system 10 of the client 
computer. As illustrated graphically by the straws, c e rt a in commands are between the 
Operating System Guard and the software application, this is in distinction to typical 
installations where these commands would instead be acted upon by the operating system 
itself; resulting in changes to the client computer that might not necessarily bo what the 
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operator intended. On tic ether hand, other common da pass through the Operating 
System Guard and axe then transferred to the Operating System itself 

While this invention has been pirticularty shown and described with references to 
preferred embodiments thereof; it will be understood by those drilled b (he art that 
various changes in form and details may be made therein -without departing from the 
scope of the hrvemicm encompassed by the appended clanna. 
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Wim isclaiiocd is: 

1. A system for creating an application software environment without changing en 
operating system of ft client computer, the system comprising an operating system 
abstraction and protection layer, wherein said abstraction and protection layer is . 
interposed between a running software application and said operating system, whereby a 
virtual environment in which an application may run is provided and application level 
interactions are substantially removed. 

2. The system of claim I, wherein changes directly to the operating By si em are 
selectively made within the context of the running application. 

y. The system of churn 2, wherein the abstraction aud protection layer dynamically 
changes the virtual environment according to atfomustTBtive settings. 

4. The system of claim 1, wherein the system continually monitors the use of shared 
system resources and acts as a service to apply and remove changes to system 
components, 

5. The system of chum 1, wherein the operating system is a Windows-based operating 
system, and wherein all operations to tho Windows Registry and Jni riles are through the 
Win32 APT, the system further comprising a means for hooking functions, whereby each 
time said functions am invoked another firnction or application intercepts the call 

6. The system of claim 5, wherein the system hooks each appropriate API fimction to 
service a request whether made by an application ran from a server or if made by an 

' application against a configuration key .being actively managed 

7. The system of claim 1, wherein said operating system obstruction end protection layer 
manages the integration of multiple instances of an application by recognizing how many 
instances of an application are running 
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8. The system of claim 7, vAcirra said operating system abstraction and protection layer 
avoids making changes on startup and sfomdown unless there Is only one application 

9. The system of claim I, wherein said operating system abstraction and protection layer 
presents an environment to an rppficatkm that appears to he an insta ll at i o n errviropjnent 
without performing an installation, whereby a "p sen do installation" is created in which 
all of the settings are brought into a virtual environment at tho time the application rang. 

10. The system of claim 9, farther comprising a means tor preventing mftrnna ri on on the 
client computer from kterfering or modifying the behavior of an application. 

1 1. The system of claim 9, farther comprising a means for dynamically changing the 
virtnal environment according to admmistrsnve settings 

12. The system of claim 9, wherein more than one instance of a single software 
application runs on the same client computer, and wherein each of said more than one 
instance connects to a different database- 

13. The system of claim 12, wherein shared, controlled contexts are provided in which at 
least two of said instances of a single application share one or more virtual settings, 

14. The system of claim 1, farther comprising a device driver monitor that receives 
msrructicns at the time of mstaDatfon for a particular application. 

15. The Systran of claim 1, farther comprising a virtual Windows Registry component to 
provide a full function registry to an application, but prevent modification lo the 

cruder lying system registry. 
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1 6. The system of claim 1, wheiem the operating system abstraction and protection layer 
responds wrtb a koy and its value if said koy and value are stored within the operating 
system abstraction and protection layer, if not stored, the operating system abstraction 
and protection layer allows the request to pass through to the Windows Registry. 

17. The system of claim 16, wherein if an attempt is made to modify the vahtc of said 
key, the operating system abstraction and protection layer allows the modification to 
occur to itself only. 
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